Fix/356 shadow copy - #428

Open

mxamin wants to merge 23 commits into

fix/356-shadow-copy

Commits on Jul 2, 2026

Commits on Jul 7, 2026

Convert every remaining raw-node crossing to shadow copies (#356)

mxamin
and
claude
committed
92d68ad

Commits on Sep 4, 2026

Unify the shadow reflection engine and prune its API (#356)
mxamin
committed
8a487f2
Guard the shadow invariants with a source-level test (#356)
mxamin
committed
66a6742
Reflect root replacement by morphing the live root in place (#356)
mxamin
committed
a3b1fce
Match id attributes by local name under the shadow (#356)

mxamin
and
claude
committed
6cc57b2
Never evict a live id registration (#356)

mxamin
and
claude
committed
4e9e56b
Read code, not comments, in the shadow audit (#356)

mxamin
and
claude
committed
302c851
Drop the source-level shadow audit (#356)

mxamin
and
claude
committed
97cb993
Replay id registrations at the node they were registered for (#356)

mxamin
and
claude
committed
38174b9
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
a4f83e3
Merge branch 'fix/356-shadow-copy' of github.com:xmlsec/python-xmlsec into fix/356-shadow-copy
mxamin
committed
767deb5
Keep entity references and adopted nodes straight under the shadow (#356)
mxamin
committed
9c36ae7
Move an attached encrypt_xml template, fingerprint text (#356)

mxamin
and
claude
committed
7e279cf
Refuse a duplicate id at register_id under the shadow (#356)

mxamin
and
claude
committed
3367b39
Bound the copy's walks, load an external DTD subset (#356)

mxamin
and
claude
committed
3a50b04
Tell two same-valued attributes of one element apart (#356)

mxamin
and
claude
committed
48e8d0d
Skip the external-DTD tests where nothing may load one (#356)

mxamin
and
claude
committed
ea7dace

Commits on Sep 5, 2026

Copy a subtree its document lost as an unlinked node (#356)

mxamin
and
claude
committed
b86e624
Snapshot add_ids' scope, retire dead registrations (#356)
mxamin
committed
ff6a0a6